Privacy Policy

This Privacy Policy describes how KIRA Markets ("we", "us", "our") collects, uses, and safeguards information about users ("you") when you use our website, Android application, and related services (collectively, the "Service").

1. Information We Collect

We collect the minimum information required to operate the Service:

• Account Information: Username, email (if provided), and hashed password. Passwords are stored using industry-standard bcrypt hashing and are never accessible in plaintext.
• Google Sign-In Data: If you choose "Continue with Google", we receive your name, email address, and profile picture from Google to create and identify your account. We never receive or store your Google password. You can use email/password sign-up instead if you prefer.
• Usage Data: Anonymous product analytics (page views, feature interactions) via PostHog. No personally identifiable market decisions are recorded.
• Session Data: Short-lived JWT tokens (8-hour expiry) for authentication. Tokens are revoked on logout.
• Technical Data: Standard server logs (IP, user-agent, timestamp) retained for 30 days for security and rate-limiting.

2. What We Do NOT Collect

• Bank account, demat account, or brokerage credentials.
• Payment card information (we do not process payments directly).
• Actual trades, portfolios, or holdings.
• Precise location data.
• Contacts, SMS, call logs, or device identifiers beyond the standard user-agent.

3. How We Use Information

• Authenticate you and personalize your educational research workspace.
• Protect the Service against abuse (rate limiting, brute-force detection).
• Improve product features using aggregated, anonymised usage patterns.
• Communicate essential Service updates.

4. Data Sharing

We do not sell, rent, or trade your personal information. We share data only with:

• Infrastructure providers (hosting, MongoDB) under strict data-processing agreements.
• Authentication provider (Emergent Auth) — processes the Google sign-in handshake only; receives no market or usage data.
• Third-party market data providers (Yahoo Finance proxy, NSE India public API) — these providers only receive symbol queries, never your identity.
• Regulators when legally compelled by a valid Indian court order.

5. Data Security

We implement the following safeguards:

• HTTPS/TLS encryption in transit.
• Bcrypt password hashing.
• Short-lived JWT sessions with server-side revocation on logout.
• Rate limiting on all authentication endpoints.
• Strict XSS output encoding across the application.
• CORS allow-listing.

6. Your Rights

Under applicable Indian data-protection law, you may request:

• Access to a copy of the personal data we hold about you.
• Correction of inaccurate data.
• Deletion of your account and associated data.
• Withdrawal of consent to analytics (contact us to opt out).

To exercise any right, contact us at the address below.

7. Children's Privacy

The Service is not directed to children under 18. We do not knowingly collect data from minors.

8. Data Retention

Account data is retained for the life of your account. You can delete your account and associated data at any time via our Account Deletion page. On deletion, we permanently remove personal identifiers within 30 days, except where retention is required by law.

9. Cookies & Local Storage

We use browser localStorage to store your JWT session token. If you sign in with Google, a single httpOnly session cookie (kira_session_token, 7-day expiry) is set for authentication; it is deleted on logout. We do not use tracking cookies for advertising. You can clear local storage at any time via your browser settings.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be notified via the Service. Continued use after such changes constitutes acceptance.

11. Contact

For privacy-related queries or data-subject requests, contact us at: support@kiramarkets.app

12. Educational Disclaimer

KIRA Markets is an educational market research platform. It does not provide personalized investment advice or portfolio management services. All investments in securities are subject to market risks. Please consult a SEBI-registered investment adviser before making investment decisions.

← Back to Home